Quantum teleportation is a universal computational primitive 
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We present a method to create a variety of interesting gates by teleporting quantum bits through 
special entangled states. This allows, for instance, the construction of a quantum computer based on 
just single qubit operations, Bell measurements, and GHZ states. We also present straightforward 
constructions of a wide variety of fault-tolerant quantum gates. 



ON 1 
On : 

ON . 

3 ■ 

<: 



> 
O 

o 

oo 
O 

On 
On . 

^ ' 

> ■ 

C ■ 

s : 
cr 



X 



Creating a quantum computer capable of realizing the 
theoretical promise of algorithms such as quantum factor- 
ing and quantum search Q will require both a design 
for a large system capable of very accurate controlled 
unitary evolution, and good fault-tolerant procedures to 
overcome inevitable residual imperfections in the physi- 
cal realization of this system . There are many sug- 
gested designs for quantum computers, but none are com- 
pletely satisfactory, in the sense that none allows a large 
quantum computer to be built in the near future pi ; and 
some universal fault-tolerant protocols are known, but 
they can be quite complicated, and frequently require 
many operations to produce a specific desired transfer- 
mation @§1||. 

Here, we address aspects of both problems, and show 
how a single technique - a generalization of quantum tele- 
portation |l - reduces resource requirements for quan- 
tum computation and unifies known protocols for fault- 
tolerant quantum computation. We show, for instance, 
that a quantum computer can be constructed using just 
single quantum bit (qubit) operations, Bell-basis mea- 
surements, and Greenberger-Horne-Zeilinger states [ [To|| . 
We also present straightforward constructions for a new, 
infinite class of fault-tolerant quantum gates. By making 
use of specific, pre-computable entangled states, these 
techniques vividly illustrate how entanglement can be a 
valuable resource for computation. 

The heart of our discussion rests in the power of entan- 
gling measurements. Measurement, in its guise as an in- 
terface between the quantum and classical worlds, is gen- 
erally considered to be an irreversible operation, destroy- 
ing quantum information and replacing it with classical 
information. In certain carefully designed cases, however, 
this need not be true. For example, quantum teleporta- 
tion uses measurement to transfer quantum informa- 
tion from one place to another, and programmable quan- 
tum gates jllj can be used to probabilistically transform 
quantum information by an arbitrary quantum opera- 
tion. Quantum error correction also allows a large set 



of quantum operations, including measurement, to be re- 
versed. 

In all these applications, quantum information is pre- 
served only in a subspace of the measured system. By 
selecting our initial state to lie in this preserved subspace, 
we can ensure, paradoxically, that the measurement tells 
us nothing about the quantum data. Still, the measure- 
ment can be very useful — once it has been done, the 
data is transformed in one of a variety of ways, indexed 
by the random measurement outcome. In the case of 
quantum teleportation or quantum error correction, this 
fact is used to restore the data to its initial state. Here, 
in contrast, we shall use quantum teleportation to trans- 
form data into a new state, corresponding to the action 
of some quantum gate which would otherwise be difficult 
or impossible to perform. 



UNITARY TRANSFORMS BY 
TELEPORTATION 



We begin by showing how a controlled-NOT (cnot) be- 
tween two qubits can be deterministically accomplished 
using quantum teleportation. Recall how quantum tele- 
portation works: a single qubit state \a) = a\0) + b\l) 
is prepared, along with an EPR state |\&) = (|00) + 
|ll))/\/2, then \a) and one qubit of |\E') are measured 
together in the Bell basis |0x) + (— l) 2 |li) (where x, z = 
{0, 1}, and x = 1 — x), giving a (uniformly distributed) 
random two-bit classical result which is xz The 
output qubit is then in the initial state but with an 
additional single-qubit Pauli operation X, Y, or Z |l3| ] 
applied to it, with the random variable xz determining 
which Pauli operator it is (with 00 corresponding to the 
identity) . We simply reverse the appropriate Pauli oper- 
ator to reconstruct |cv), as shown in Fig. [I]. Replication 
of this circuit allows teleportation of multiple qubits. 
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FIG. 1. Quantum circuit for teleportation. Time proceeds 
from left to right. < denotes the EPR state |*1/), and the box 
B is a measurement in the Bell basis. The double wires carry 
classical bits, and the single wires, qubits. 

The same basic idea can be used to teleport two qubits 
through a CNOT gate (a two-qubit gate which flips the 
"target" qubit whenever the "control" qubit is a |1)); that 
is, the reconstructed qubits are the original ones trans- 
formed by a CNOT gate operation. This is accomplished 
by the circuit shown in Fig. 0, where \a) = a|0) + b\l) 
and |/3) = c|0)+d|l) are two arbitrary single qubit states, 
and 



lx) = 



(|00) + |11))|00) + (|01) + |10))|11) 
V2 



(1) 



The cnot gate has as its control, and \a) as its target. 

This can be verified by direct computation, but it is 
easier to understand by realizing that \\) can be created 
simply using two EPR pairs (Fig. |3|) . Combining this cir- 
cuit with the previous one, we immediately note that the 
only differences with Fig. [I] are the CNOT gate appearing 
between the two EPR pairs, and the different classically 
controlled single qubit gates. For each EPR pair, the 
Bell basis measurement effectively introduces one of four 
random quantum operations (/, X, Y, Z) to the other half 
of the involved EPR pair, at a time which is before the 
CNOT gate fy}. 
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FIG. 2. Quantum circuit for teleporting two qubits through 
a controlled-NOT gate, giving |out) = CNOT |/3)|a). 

However, it happens that single Pauli operations oc- 
curring before a CNOT gate are equivalent to (different) 
Pauli operations occurring after the CNOT gate H. For 
instance, CNOt(X ® I) = (X ® X)cnot. This is equiv- 
alent to the statement that conjugation by CNOT pre- 
serves the Pauli group (comprised of tensor products of 
Pauli matrices, with overall sign ±1). Thus, the quantum 
teleportation construction still works, but using different 



controlled single-qubit operations to reconstruct the de- 
sired result. 
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FIG. 3. Quantum circuit to create the |%) state 
from two EPR pairs (left), or from two GHZ states 
|T) = (| 000) + |111))/V2 (right). H is the Hadamard gate. 

This construction enables CNOT gates to be performed 
between two qubits, using only classically controlled sin- 
gle qubit operations, prior entanglement, and Bell basis 
measurements. Moreover, \\) can be created from two 
pairs of GHZ g(J states (Fig. g). 



II. FAULT TOLERANT QUANTUM 
COMPUTATION 

Fault tolerant gates come from noting that essentially 
the same construction works equally well for any gate 
U which preserves the Pauli group under conjugation; 
this set of gates, the Clifford group, plays an important 
role in the theory of quantum error-correcting codes and 
fault-tolerance To see how this is accomplished, 

consider an n-qubit state 1^), in which each qubit is en- 
coded using a stabilizer code, such as the 7-qubit CSS 
code |l5|]l6f| . and 1 shall represent the corresponding 
encoded qubit states. Let \%l n ) be the 2n-(encoded) qubit 
Bell state ( 1 00) + 111)) 18 ™ (normalizations suppressed for 
clarity), rearranged so that the first n labels represent 
half of the EPR pairs (the upper qubits), and the last 
n the other half (the lower qubits). In other words, 
(I <8> U)\^ n ) (where / is the identity on n qubits) is U 
acting on the lower qubits of all the EPR pairs. 

The goal of fault-tolerant computation is to perform 
gates on the logical qubits while restricting the propaga- 
tion of errors among the physical qubits, which can com- 
promise the code's ability to correct errors. The usual 
method for doing this is to only perform transversal gates 
on the code — that is, gates which interact qubits in one 
code block only with corresponding qubits in other code 
blocks. While errors may then propagate between blocks, 
they cannot propagate within blocks, so a single faulty 
gate can only cause a single error in any given block of 
the code. 
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Operators from the Pauli group (such as X, Y, and 
Z) can easily be performed on logical qubits which are 
encoded with a stabilizer code [l^] . Let C\ represent 
the Pauli group. C2, the Clifford group, will be the set 
of gates which map Pauli operators into Pauli operators 
under conjugation. Through an appropriate sequence of 
gates and measurements, any C2 operation can also be 
performed on any stabilizer code Jl7| | . 

More difficult to perform are gates in the class defined 

as 



C 3 = {U\UC\U^ C C 2 }. 



(2) 



C3 contains gates such as the Toffoli gate (controlled- 
controlled-NOT) , the 7r/8 gate (rotation about the Z- 
axis by an angle tt/4), and the controlled- phase gate 
(diag(l, 1, 1, i)). For instance, the ir/8 gate transforms 
X — ► PX and Y — > —iPY (Z commutes with the gate 
and is thus left unchanged), where P is the 7r/4 gate 
(diag(l,i)). Fault-tolerant constructions of these gates 
are known @,^,|l8| , but they are ad hoc and do not gen- 
eralize easily. 

However, our teleportation construction provides a 
straightforward way to produce any gate in C3 , as shown 
in Fig. ^. For U G C3, first construct the state 



= (I<8C/)|* n ) 



(3) 



Next, take the input state and do Bell basis measure- 
ments on this and the n upper qubits of I^Jj), leaving us 
with n qubits in the state 



\fi>out) = un B ,\ii>) = KzU\i>). 



(4) 



where R xz is an operator in C% which depends on the 
(random) Bell basis measurement outcomes xz, and R' xz 
is an operator in C 2 - the image of R xz under conjuga- 
tion by U. Since R' xz is in the Clifford group, it can be 
performed fault-tolerantly. As long as \^^) can be pre- 
pared fault-tolerantly, this construction allows U to be 
performed fault-tolerantly. 
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FIG. 4. Quantum circuit to perform U fault tolerantly us- 
ing quantum teleportation. In general, this works for any 
U G Cfc, since R' xz G Ck-i by definition of Ck- 

Of course, must be prepared fault-tolerantly. To 
do this, note that the state |\D fn ) is the +1 eigenvector of 
the 2n operators X^Xi and Z^Zi (where Xi and Z± are 



X and Z , respectively, acting on the i th upper or lower 
qubit). Therefore, I^J/) is the +1 eigenvector of the oper- 
ators Mi = X t (g> UXiW and AT, = Z± ® UZiW. Further- 
more, the eigenvalues of these 2n operators completely 
determine the state, so if all these operators have eigen- 
value + 1, the state actually is the desired one. There- 
fore, to produce prepare n EPR pairs, which can 
easily be done fault-tolerantly by measuring Xi <g> Xi and 
Zi®Z{ or with fault-tolerant Hadamard and CNOT gates, 
measure the operators Mi and iVj, and perform an ap- 
propriate Pauli operation Zi ® I or Xi <g> I as necessary 
to move into the +1 eigenspace of all the M^s and A^s. 

The hard part of the preparation is measuring Mi 
and Ni fault-tolerantly. Since this construction is quite 
complicated in the case where Mj and Ni do not have 
transversal constructions, we defer the discussion of this 
point to the Appendix. Note, however, that the only 
point where this complex construction is necessary is in 
the preparation of the ancilla states used in the tele- 
portation. 



III. CONCLUSION 

Our construction of quantum gates using teleportation 
offers tantalizing possibilities for relaxing experimental 
constraints on realizing quantum computers. For ex- 
ample, using single photons as qubits and current op- 
tical technology, one can perform nearly perfect Bell ba- 
sis measurements po), quantum teleportation pi], al- 



most create GHZ states 22 1 , and certainly perform single 
qubit operations Jl9[ ]. Thus, given GHZ states, quantum 
computers might be constructed nearly completely from 
linear optical components. Similar implications can be 
drawn for other physical systems, particularly if entan- 
gled states can readily be prepared and stored. 

The construction of a fault tolerant Toffoli gate us- 
ing teleportation is a dramatic simplification of previous 
constructions, and generalizes through a recursive appli- 
cation of the construction to provide an infinite family 
of gates, Ck = {U\UCiU^ C CV--i}, all of which can 
be performed fault tolerantly. While the precise set of 
gates which form Ck is still under investigation, it is 
known that every Ck contains interesting gates, such as 
the 7r/2 fc rotations, which appear in Shor's factoring al- 
gorithm 0. The states needed for a gate in Ck 
are exponentially difficult (in k) to construct, but they 
may be prepared offline, since Y&y) is independent of the 
data being acted upon. Thus, l^y) are valuable generic 
quantum resources which might be considered a manu- 
facturable commodity for quantum commerce! Even if 
Y&ij) are not available, the construction presents a great 
conceptual simplification, and for small k, it can greatly 
reduce the number of operations needed to assemble the 
precise gates called for in an algorithm, clearly of ben- 
efit in efficiently performing quantum computation with 
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realistically imperfect gates. 



APPENDIX A: FAULT-TOLERANT 
PREPARATION OF |*^} 

A crucial step in the fault-tolerant preparation of the 
ancilla state is the measurement of an operator M 
acting on the logical qubits in a code. The procedure 
for doing such measurements has been described and is 
straightforward; however, its adaptation to the present 
goal has not been clearly documented in the literature, 
and there are a number of potential pitfalls which we 
believe are useful to know about. 

The basic problem can be illustrated by considering the 
standard non-fault-tolerant measurement method shown 
m Fig. |a. We prepare a control qubit is in the state 
|0) + 11), and perform a controlled-M gate to the block of 
the code containing the logical qubits we wish to measure. 
The M in this case must be an encoded version of M, so 
it acts on the data, and not the physical qubits making 
up the code. Then we Hadamard transform the control 
qubit and measure it. It is sufficient for our purposes to 
restrict attention to operators with eigenvalues ±1; thus, 
the data will be collapsed on a +1 or —1 eigenstate of M 
when the control qubit reads or 1, respectively. 
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FIG. 5. a) A non-fault-tolerant procedure to measure M 
with eigenvalues ±1, b) A coherent version of this procedure. 

This procedure fails to be fault-tolerant in a variety of 
ways. The control qubit is a single qubit; an error in it 
before or during the operation could be propagated to ev- 
ery qubit in the code block. An error on the control qubit 
after the measurement will tell us the wrong value of the 
measurement, which may cause us to act improperly later 
on. Furthermore, in many cases of interest to us here, 
the encoded version of M is itself difficult to perform, 
requiring a number of transversal operations and some 
measurements. These measurements, in turn, should be 
done fault-tolerantly, but since the control qubits used 
for those measurements are entangled with the control 



qubits one level up, they cannot simply be projectively 
measured. 

These problems can be solved using three basic ideas. 
First, a coherent measurement procedure can be adopted, 
utilizing measurement results to immediately disentan- 
gle all involved ancilla qubits. Second, by using multiple 
qubits prepared in a "cat" state 1 00 • • • 0) + |11 • • • 1) of 
n qubits (where each block of the code also contains n 
qubits), propagation of errors can be limited. Finally, 
since the state we are preparing, |\&j/), is known before- 
hand (as opposed to computing with variable data), per- 
forming the encoded version of M can be done through 
recursive application of the basic measurement proce- 
dure. These three steps are described in detail below. 

Coherent measurement is possible in all cases of inter- 
est in this paper. In our application, the measurement, 
if it produces the —1 eigenstate, is followed by a (classi- 
cally controlled) operation P (frequently a Pauli opera- 
tion) which moves the data from a —1 eigenstate of M 
to a +1 eigenstate of M. Equivalently, we may instead 
follow the Hadamard transform on the control qubit by a 
controlled- P gate, as shown in Fig. ||b. Doing this leaves 
the control qubit disentangled with the data (which is 
always in the same state, a +1 eigenstate of M). Of 
course, since this process still depends on a single control 
qubit, it is not fault tolerant either, so a modification of 
the control scheme is needed, using cat states. 
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FIG. 6. Fault-tolerant measurement of a gate M with a 
transversal implementation. 

Cat-state control is the method utilized in W and 0] 
to provide fault-tolerant measurement of Pauli operators 
(elements of C\). As shown in Fig. ||, the single con- 
trol qubit is replaced with a cat state |00 • • • 0) + 1 11 • • • 1) 
of n qubits. Then given a transversal implementation 
of M (which, for a stabilizer code, is always available for 
Pauli operators) , we can easily implement the controlled- 
M part of the measurement: the gate of M which acts on 
the k th physical qubit of the block becomes a controlled 
gate, conditioned on the k th qubit of the cat state. Since 
in the absence of errors, every qubit in the cat state is ei- 
ther or 1, we either perform M completely or not at all. 
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If a single qubit of the cat state is wrong, the error can 
only propagate to the corresponding qubit of the code. 
The preparation of the cat state (which involves CNOTs 
between the qubits of the state) might have resulted in 
multiple errors, so before interacting it with the data, we 
should verify the cat state by comparing pairs of qubits 
— all should be the same. 

Afterwards, we decode the cat state with a series of 
CNOT gates and a Hadamard; the resulting bit is again 
or 1 depending on the eigenvalue of the state of the 
data. The value of this result does still depend on the 
bottleneck of the single qubit produced by decoding the 
cat state. In fact, even a single phase error on one qubit 
of the cat state at any time will give us the wrong value 
for the decoded cat state. Therefore, in order to gain suf- 
ficient confidence in the result, we repeat the procedure 
a number of times, and only act on the majority result. 
Also note that a single error in the data might cause a 
wrong measurement result, so we should perform error 
correction between measurement trials. 

The case of interest here is when M is generally some 
element of Ck (not just Ci), in which case recursive ap- 
plication of the above procedures is necessary, since im- 
plementation of M will generally consist of a series of 
transversal gates and measurements. For instance, to 
prepare the ancilla needed to teleport a C3 gate U, we 
must measure gates of the form M = P ® UPW , where 
P is some Pauli operator. By the definition of C3, M is 
in the Clifford group, and for a general stabilizer code, 
there will be no simple transversal implementation of M. 
The transversal gates in the implementation of M present 
no particular problem — we can condition them on the 
cat state just as in Fig. ^. The measurements present 
the difficulty. Each will require its own cat state (a se- 
quence of them, in fact, since the measurement requires 
a number of trials), and we must be certain the "inner" 
measurement (of some operator N) does not destroy the 
superposition of the cat state for the "outer" measure- 
ment of M. 

We proceed as follows: For each trial for the inner 
measurement, prepare and verify a single cat state of n 
qubits. Using this cat state, perform a controlled- TV op- 
eration in the usual way, as per Fig. |^ (assume for the mo- 
ment we have a transversal implementation of N) . How- 
ever, the gates making up this operation are themselves 
controlled by qubits from the outer cat state. For in- 
stance, if N requires not gates on each qubit in the code, 
we perform controlled-controlled-NOT gates instead, us- 
ing the fcth qubits of the inner and outer cat states as 
controls for the fcth qubit in the block. Then we decode 
the cat state normally. If there have been no errors, the 
result is a single qubit in the state |0) for the part of 
the outer cat state. For the 1 part of outer cat state, 
the qubit is entangled with the data: a|0)|<fo) +/3|l)|<^i) 
(where |^>o) and \4>i) are eigenstates with eigenvalues ±1, 
and the data begins in the state a\<j>o) +0\<f>i}). Since the 



"data" here is actually an ancilla we are preparing, we 
know the values of a and j3. This fact will be important 
later. 

We repeat the above cat state preparation, controlled- 
N, and decoding for each of the n cat states in a trial. 
Still assuming no errors, the overall state of the system 
at this point is 

|OO---O) oc |O) ic |0) data + (Al) 

|11 • • • l) oc (a|O) ic |0 O )data + /3|l)ic|<Mdata) ■ 

The subscript "oc" indicates the outer cat states, the 
subscript "ic" indicates the qubit produced after decod- 
ing the inner cat state for a single measurement trial, and 
\4>) = a\<f>o) + 0\<f>i) is the state of the data before the 
measurement. 

An error anywhere in this procedure could potentially 
give us the wrong value for the decoded inner cat state, 
which is why we need more measurement trials. We 
should check, however, that a single error in the pro- 
cedure will only cause a single error in the data. This is 
true, in fact: an error in a single qubit of the inner or 
outer cat states can only propagate to the corresponding 
qubit in the data block. 

To prevent a repetition of any problem that may have 
occurred in the first trial, we perform an error correc- 
tion operation on the code block, and reverify the outer 
cat state, correcting any mistakes we see in that state. 
Then we go through another complete trial. We con- 
tinue alternating measurement trials with error correc- 
tion/verification steps for a total of r trials (for some r 
large enough to give us confidence in the res ult) . Assum- 
ing no errors, the result will look like Eq. (Al), except 
there will now be a total of r inner qubits, which in the 
absence of errors would all be the same. For each of the 
71 qubits in the data block, we take the majority value of 
the r inner qubits and store the result in a new ancilla 
qubit. Then we perform the controlled- P "correction" 
step (as per Fig. ^|b) based on the majority value for just 
the single qubit at that coordinate. Therefore, a single 
error in the majority calculation will only affect a single 
qubit in the data block. 

The final step in the recursive construction is to ap- 
propriately disentangle the inner and outer qubits. As- 
suming no errors, when the outer cat state is 0, the inner 
qubits are all in the state |0) as well, and the data block 
is in the state \<f>). When the outer cat state is 1, the data 
block is in the state \<po) (as desired), but the r + n in- 
ner qubits are in a superposition a|00 ■ • • 0) + • ■ ■ 1), 
so the inner qubits are still entangled with the outer 
cat state. Therefore, we perform sufficient CNOT oper- 
ations among the inner qubits to leave one in the state 
a|0) + (3\1), and the others all as |0). Now we use our 
knowledge of a and (3 to rotate the single remaining in- 
ner qubit back to |0), conditioned on (any) single qubit 
from the outer cat state. This completely disentangles 
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the inner qubits from the outer cat state and the data, 
leaving us with the state 



|00 • • -0> c 



/ data. 



+ |H---l)oc|0o) 



data i 



(A2) 



as desired. 

As we noted before, a single error during any trial prop- 
agates to at most one qubit in the data block. A single 
qubit error in the outer cat state or the data block will 
ruin an inner measurement trial, but will not survive the 
subsequent verification and error correction step, so it 
only ruins the one set. Since we perform r inner mea- 
surement trials, a total of r/2 such errors will be required 
to ruin every majority calculation. Therefore, for large 
enough r, this will be of the same order of magnitude as 
other failure modes (such as having many errors in the 
data block itself). An error in a single majority calcu- 
lation will only produce a single error in the data block. 
There are a number of places, however, where a single 
error can cause the disentanglement of the inner qubits 
to fail. This will effectively collapse the superposition of 
and 1 in the outer cat state. This is annoying, but 
not fatal; a single qubit error directly in the outer cat 
state can produce the same result, which is one reason 
we require a number of trials for any measurement. 

We have demonstrated a procedure which performs a 
inner measurement conditioned on an outer cat state. By 
stringing these together with transversal operations, we 
can measure any operator M in the Clifford group. This 
allows us to create ancillas to teleport any C3 gate. For 
C4 and higher gates, we will need similar, but more com- 
plicated procedures. We will need to measure C3 gates; 
this requires the production of an ancilla for the C3 gate, 
which in turn requires measurement of a C2 (Clifford 
group) gate, which may require measurement of Pauli 
group operators. Therefore, we may require 3 levels of 
cat states at any given time, but by simply nesting the 
above procedure, we can also produce the ancillas needed 
for C4 gates. Further nesting will allow us to build gates 
from C5 and higher. 
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